B

Brixio

Global MSP delivering cloud, security, apps

Professional Services Engineer Zero Trust / SASE - Cloudflare One

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeParis, FranceNo salary listed

About the Job

Requirements

  • At least 2 years of production Zero Trust or SASE deployments for clients using Cloudflare One, Zscaler (ZIA, ZPA), Netskope, Palo Alto Prisma Access, Cato Networks, or Fortinet SASE.
  • 3 to 6 years of experience in network security, integration, or professional services.
  • Knowledge of TCP/IP, DNS, TLS and PKI, routing, IPsec VPNs, proxies, and firewalls.
  • Experience with SSO using SAML and OIDC, SCIM provisioning, and Entra ID or Okta.
  • Experience deploying agents at scale, MDM, and device-posture controls.
  • Ability to independently lead a technical workshop and write clear documentation.
  • Fluent French and professional English.
  • Willingness to travel regularly to clients in France and occasionally in Europe.

Responsibilities

  • Lead technical scoping workshops with client network, security, and endpoint teams, then write detailed designs covering access architecture, policies, and migration plans.
  • Deploy Cloudflare One, including Access (ZTNA), Gateway (SWG and DNS filtering), WARP client, Tunnel, CASB, DLP, browser isolation (RBI), and, depending on the project, Magic WAN, Magic Firewall, and Email Security.
  • Replace VPNs with ZTNA and existing proxies with Gateway without disrupting service for users.
  • Integrate identity providers (Entra ID, Okta) using SAML, OIDC, and SCIM; integrate posture controls (Intune, EDR); and forward logs to the client SIEM.
  • Secure remote access for contractors and technicians to industrial and technical equipment.
  • Apply Cloudflare One controls to AI usage, including shadow-AI detection, DLP for prompts, and governance of AI applications.
  • Produce HLDs, LLDs, and runbooks; conduct client acceptance testing; and hand over to support and the Casablanca MSP.
  • Work within the signed project scope, report out-of-scope requests to the Delivery Manager before handling them, and enter time weekly in Brixio One.
  • Contribute reusable deployment templates, standard configurations, Terraform, and playbooks to accelerate future projects.

Desired Qualifications

  • Direct experience with Cloudflare One or a Cloudflare certification; candidates without certification are expected to obtain it within 90 days of joining.
  • Experience with Terraform, APIs, and Python scripts.
  • Knowledge of OT and industrial environments.
  • Knowledge of NIS2 and DORA requirements.
  • Interest in AI and Cloudflare's developer platform, including AI Gateway and Workers.

About the Company

Brixio

Global MSP delivering cloud, security, apps

Brixio is a global IT services provider focusing on cloud infrastructure, cybersecurity, and custom application development, delivered as managed services. It supports full IT project lifecycles with 24/7 managed cloud services, cloud migration and modernization, and DevSecOps, plus threat detection, DDoS protection, Web Application Firewall, and Zero Trust. It differentiates itself through a blended global delivery model from a 2023 merger (ITFAQ, Constelio, SourceWell) with teams across Dubai, Singapore, the Philippines, and Luxembourg, serving Europe, the Middle East, and Asia-Pacific with hybrid delivery and local presence. Its goal is to make innovation and cybersecurity accessible for organizations of all sizes by combining global engineering talent with local delivery.

Company size
11-50
Company stage
Not listed
Total funding
Not listed
Headquarters
Bertrange, Luxembourg
Founded
2023

Recently Posted Jobs

Explore more opportunities at Brixio

See more jobs